You might see screenshots in your friend circle saying "Binance iOS APP is installed" — but if you look closely, the icon might not be a real APP at all, but a webpage shortcut added to the home screen by Safari. This article teaches you how to identify it. Download entry: Binance Website, mobile Binance Official App, if you haven't installed the iOS App see the iOS Install Guide.
1. What is a Webpage Shortcut?
iOS Safari supports "Add to Home Screen" — turning a webpage into an icon that looks like an APP. When opened, it's actually Safari opening the webpage in full screen, but visually it is hard to distinguish from a native APP.
Phishers exploit this feature by:
- Creating a fake Binance webpage (identical to the real site)
- Assigning the real Binance icon to the webpage
- Instructing you to "Add to Home Screen"
- Making the user believe they have installed the real APP, when in fact every time they open it, it connects to a phishing site
2. 5-Second Identification Methods
| Method | Native APP | Web Shortcut |
|---|---|---|
| Spotlight Search (swipe down to search) | Can be found | Not always (some systems can) |
| Settings → App List | Can be found | Will not appear |
| iPhone Storage | Shows the app | Does not display |
| Long press icon → App info | Shows version number | Shows URL |
| Top bar upon launch | No browser bar | URL bar occasionally flashes |
The fastest way: Go to Settings → General → iPhone Storage and see if you can search for Binance. If you can find it + it shows the developer as Binance Holdings = Real. If you can't find it, it's a web shortcut.
3. Typical Phishing Scenarios
Scenario A: A Group Teaches You "Share → Add to Home Screen"
A scammer pushes a fake site link in a group and asks you to open it in Safari and use the share menu to "Add to Home Screen". This step is actually saving the phishing site to your home screen.
Scenario B: Automatically Adding a Profile
Even more dangerous is when combined with a configuration profile — you visit a site, and it automatically pops up "Install Binance Profile". This has escalated into enterprise certificate phishing. See our article on "Enterprise Certificate Phishing" for specific handling.
Scenario C: A Friend Sends an "APP" Screenshot
A friend thinks they installed the APP but it's actually a shortcut, and when they screenshot it for you, you also think it's the APP. The entire chain gets deceived, making it hard to identify.
4. What to Do If You Mistakenly Installed a Shortcut
Delete the Home Screen Icon
Long-press the icon → "Delete Bookmark" or "Remove App" (depending on the iOS version). After deleting, the icon will no longer appear.
Clear Browser Data
Settings → Safari → Clear History and Website Data. Clear the cookies and cache of the phishing site you previously visited.
Check Configuration Profiles
Settings → General → VPN & Device Management → Delete any unfamiliar profiles.
If You Entered Your Password
Proceed according to the emergency response protocol for stolen accounts.
5. Long-Term Defense
1. Always Install Binance from the App Store
Whether on iOS or iPadOS, the official Binance is distributed through the App Store (you must switch to a non-China Apple ID). Other paths are untrustworthy.
2. Add the Real APP to Lock Screen Widgets
The real Binance will appear as an option when adding lock screen widgets. If your "Binance" icon cannot be added as a widget, it is definitely not an APP.
3. Disable Safari's Automatic Add Suggestions
Settings → Safari → Start Page → Turn off "Frequently Visited Sites" or related suggestions to avoid accidental clicks.
4. Teach Family Members to Identify
Elderly users are especially prone to equating a "home screen icon" with an "APP". Explain the proper origins of legitimate apps in advance.
6. Legitimate Uses of Web Apps
We don't deny that web shortcuts have legitimate scenarios. For example, if you are abroad and it's inconvenient to switch regions, you can temporarily add the binance.com homepage to your home screen as a transitional entry point — provided that:
- You confirm the browser address bar is binance.com before adding
- It is only for transition, and you will eventually switch IDs to install the real APP
- You do not enter your password inside the home screen icon (since it is still a webpage, the phishing risks are the same as a browser)
FAQ
Q1: Can I use a Web App as a long-term alternative to the real APP? Not recommended. Web Apps lack native push notifications, certificate pinning, Face ID unlock, and they take up Safari processes. The real APP has a higher security level.
Q2: Are there still shortcut phishing attempts on iOS 18? Yes. iOS retains the "Add to Home Screen" feature in the Safari share menu, so the phishing method remains viable.
Q3: Do Web Apps take up storage space? Very little. It's just a URL shortcut + cache. However, if the cache stores login states, there is a risk.
Q4: Can I upgrade from a Web App to the real APP? No. You must delete the shortcut → install the real APP from the App Store.